Hi David,
You gave me a very strong hint below !
On Tue, 4 Mar 2003, Dr D J Colling wrote:
> Ok people,
>
> I see two different problems here, one more serious than the other. So we
> shall deal with the serious first. There is an authentication problem for
> Liverpool, Oxford, Cambridge and SLAC. All that I see in the log files are
> really useless messages such as " Reason: authentication with the remote
> server failed" and "Globus Failure".
>
> Gilbert tells me that the SLAC CRLs are up to date.... I have no reason to
> doubt him, besides I would normally get a more informative message in the
> logs if that were the case. The problem appears to happen at somepoint
> where the some files are geing transferred (maybe by the wrapper script).
> Have there been firewall changes at any of these sites? I shall have a
> deeper look at this and see if I can see something, but any ideas would be
> welcome.
> [...]
Yes, this rings a bell for me: yes, I did have to hack the wrapper script,
since the worker nodes are located behind a firewall at SLAC, and I can't
make them access anything in the outside world. But this was running rather
smoothly until February 17th at least.
But I got no trace of the request being even forwarded to the SLAC CE, since
this is the only message showing in the gatekeeper log file:
------------------
GRAM contact:
bbr-gate01.slac.stanford.edu:2119:/O=doesciencegrid.org/OU=Services/CN=bbr-gate01.slac.stanford.edu
Notice: 6: Got connection 155.198.216.19 at Mon Mar 3 05:31:46 2003
Failed reading length 0
GSS authentication failure
Communications Error
globus_gss_assist token :3: failure: Connection closed
GSS status: major:00090000 minor: 00008000 token: 00000003
Failure: GSS failed Major:00090000 Minor:00008000 Token:00000003
Failure: GSS failed Major:00090000 Minor:00008000 Token:00000003
------------------
which IMHO shows that the authentication step was not passed.
Beyond this, here is the date stamp of all the CRL files that I know of:
[bbr-gate01] ~ > ll /etc/grid-security/certificates/*.r0
-rw-r--r-- 1 root root 30721 Mar 3 09:25
/etc/grid-security/certificates/0ed6468a.r0
-rw-r--r-- 1 root root 2354 Mar 3 09:25
/etc/grid-security/certificates/16da7552.r0
-rw-r--r-- 1 root root 2158 Mar 3 09:25
/etc/grid-security/certificates/1e43b9cc.r0
-rw-r--r-- 1 root root 3417 Mar 3 09:25
/etc/grid-security/certificates/1f0e8352.r0
-rw-r--r-- 1 root root 1783 Mar 3 09:25
/etc/grid-security/certificates/34a509c3.r0
-rw-r--r-- 1 root root 1847 Mar 3 09:25
/etc/grid-security/certificates/41380387.r0
-rw-r--r-- 1 root root 7614 Mar 3 09:25
/etc/grid-security/certificates/49f18420.r0
-rw-r--r-- 1 root root 1459 Mar 3 09:25
/etc/grid-security/certificates/6349a761.r0
-rw-r--r-- 1 root root 5805 Mar 3 09:25
/etc/grid-security/certificates/6b4ddd18.r0
-rw-r--r-- 1 root root 5065 Mar 3 09:25
/etc/grid-security/certificates/6df70cb1.r0
-rw-r--r-- 1 root root 4840 Mar 3 09:25
/etc/grid-security/certificates/90e2484f.r0
-rw-r--r-- 1 root root 11017 Mar 3 09:25
/etc/grid-security/certificates/9d8753eb.r0
-rw-r--r-- 1 root root 1888 Mar 3 09:25
/etc/grid-security/certificates/bc870044.r0
-rw-r--r-- 1 root root 1763 Mar 3 09:25
/etc/grid-security/certificates/cf4ba8c8.r0
-rw-r--r-- 1 root root 2182 Mar 3 09:25
/etc/grid-security/certificates/d64ccb53.r0
-rw-r--r-- 1 root root 5660 Mar 3 09:25
/etc/grid-security/certificates/df312a4e.r0
-rw-r--r-- 1 root root 3667 Mar 3 09:25
/etc/grid-security/certificates/ed99a497.r0
Did I miss something ?
Thanks, Cheers, Gilbert.
--
*---------------------------------------------------------------------*
Gilbert Grosdidier mailto:[log in to unmask]
Ext 74462 when at CERN
LAL / IN2P3 / CNRS Phone : +33 1 6446 8909
Faculte des Sciences, Bat. 200 Fax : +33 1 6446 8546
B.P. 34, F-91898 Orsay Cedex (FRANCE)
|